GHSA-53jm-3hc9-fqqcMediumCVSS 5.3

Apache Batik vulnerable to Server-Side Request Forgery

Published
September 23, 2022
Last Modified
November 3, 2025

🔗 CVE IDs covered (1)

CVE-2022-38648 →

📋 Description

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik Bridge versions 1.14 and below.

🎯 Affected products2

  • maven/org.apache.xmlgraphics:batik:< 1.15
  • maven/org.apache.xmlgraphics:batik-bridge:< 1.15

🔗 References (8)